{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:L3NBXDUKDC2RZ3M4557SGIB57W","short_pith_number":"pith:L3NBXDUK","canonical_record":{"source":{"id":"2506.23706","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-06-30T10:29:42Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"54902905ff71809b1c7408b2cbb92f16ec522fcb845693eeaa67553e6451018b","abstract_canon_sha256":"32bb823f2b0095d0bc8c8212e0e01c513030fc06eb97cf69971201831de5d849"},"schema_version":"1.0"},"canonical_sha256":"5eda1b8e8a18b51ced9cef7f23203dfd81fb2ccaa16e0df09608d41490967b74","source":{"kind":"arxiv","id":"2506.23706","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23706","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23706v1","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23706","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_12","alias_value":"L3NBXDUKDC2R","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_16","alias_value":"L3NBXDUKDC2RZ3M4","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_8","alias_value":"L3NBXDUK","created_at":"2026-07-05T11:29:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:L3NBXDUKDC2RZ3M4557SGIB57W","target":"record","payload":{"canonical_record":{"source":{"id":"2506.23706","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-06-30T10:29:42Z","cross_cats_sorted":["cs.CL","cs.CR"],"title_canon_sha256":"54902905ff71809b1c7408b2cbb92f16ec522fcb845693eeaa67553e6451018b","abstract_canon_sha256":"32bb823f2b0095d0bc8c8212e0e01c513030fc06eb97cf69971201831de5d849"},"schema_version":"1.0"},"canonical_sha256":"5eda1b8e8a18b51ced9cef7f23203dfd81fb2ccaa16e0df09608d41490967b74","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:29:26.845279Z","signature_b64":"kL/nyXXwuTePYbub9lbckBfMSIZo/tM66Pxe8gon5hPa+Zco3sRtUpMacf9UMLO7Zq5pNEPJ+uVraT8kJjRqDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5eda1b8e8a18b51ced9cef7f23203dfd81fb2ccaa16e0df09608d41490967b74","last_reissued_at":"2026-07-05T11:29:26.844773Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:29:26.844773Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.23706","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WCPJ9LcJ4qWmU/IMO3gtYuk4LX8ABJr7FmKQVfoP0vV379e7kiWUzVGjDxcOA3wlVugXJW9uzHv0OO7N83bECA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T00:11:30.067034Z"},"content_sha256":"759cb47332de60d8d900583466d8ccefdae5b82a5f10f5b6f875fb1a68492021","schema_version":"1.0","event_id":"sha256:759cb47332de60d8d900583466d8ccefdae5b82a5f10f5b6f875fb1a68492021"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:L3NBXDUKDC2RZ3M4557SGIB57W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attestable Audits: Verifiable AI Safety Benchmarks Using Trusted Execution Environments","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.CR"],"primary_cat":"cs.AI","authors_text":"Alastair R. Beresford, Bill Marino, Christoph Schnabl, Daniel Hugenroth","submitted_at":"2025-06-30T10:29:42Z","abstract_excerpt":"Benchmarks are important measures to evaluate safety and compliance of AI models at scale. However, they typically do not offer verifiable results and lack confidentiality for model IP and benchmark datasets. We propose Attestable Audits, which run inside Trusted Execution Environments and enable users to verify interaction with a compliant AI model. Our work protects sensitive data even when model provider and auditor do not trust each other. This addresses verification challenges raised in recent AI governance frameworks. We build a prototype demonstrating feasibility on typical audit benchm"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23706","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.23706/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:29:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ocJj/Ic5ibRMOKI3lqpLIci38iqeSCjNTi0UveYx5UMEKJBg3b6133RH0RcyejPocKhfE/95VGqDtNy3jpK5AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T00:11:30.067511Z"},"content_sha256":"be4ef0ad075aa0cf05c30afbd0205028b1e76368a73d015bdd826d67e112c9ce","schema_version":"1.0","event_id":"sha256:be4ef0ad075aa0cf05c30afbd0205028b1e76368a73d015bdd826d67e112c9ce"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L3NBXDUKDC2RZ3M4557SGIB57W/bundle.json","state_url":"https://pith.science/pith/L3NBXDUKDC2RZ3M4557SGIB57W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L3NBXDUKDC2RZ3M4557SGIB57W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T00:11:30Z","links":{"resolver":"https://pith.science/pith/L3NBXDUKDC2RZ3M4557SGIB57W","bundle":"https://pith.science/pith/L3NBXDUKDC2RZ3M4557SGIB57W/bundle.json","state":"https://pith.science/pith/L3NBXDUKDC2RZ3M4557SGIB57W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L3NBXDUKDC2RZ3M4557SGIB57W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:L3NBXDUKDC2RZ3M4557SGIB57W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"32bb823f2b0095d0bc8c8212e0e01c513030fc06eb97cf69971201831de5d849","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-06-30T10:29:42Z","title_canon_sha256":"54902905ff71809b1c7408b2cbb92f16ec522fcb845693eeaa67553e6451018b"},"schema_version":"1.0","source":{"id":"2506.23706","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23706","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23706v1","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23706","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_12","alias_value":"L3NBXDUKDC2R","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_16","alias_value":"L3NBXDUKDC2RZ3M4","created_at":"2026-07-05T11:29:26Z"},{"alias_kind":"pith_short_8","alias_value":"L3NBXDUK","created_at":"2026-07-05T11:29:26Z"}],"graph_snapshots":[{"event_id":"sha256:be4ef0ad075aa0cf05c30afbd0205028b1e76368a73d015bdd826d67e112c9ce","target":"graph","created_at":"2026-07-05T11:29:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.23706/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Benchmarks are important measures to evaluate safety and compliance of AI models at scale. However, they typically do not offer verifiable results and lack confidentiality for model IP and benchmark datasets. We propose Attestable Audits, which run inside Trusted Execution Environments and enable users to verify interaction with a compliant AI model. Our work protects sensitive data even when model provider and auditor do not trust each other. This addresses verification challenges raised in recent AI governance frameworks. We build a prototype demonstrating feasibility on typical audit benchm","authors_text":"Alastair R. Beresford, Bill Marino, Christoph Schnabl, Daniel Hugenroth","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-06-30T10:29:42Z","title":"Attestable Audits: Verifiable AI Safety Benchmarks Using Trusted Execution Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23706","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:759cb47332de60d8d900583466d8ccefdae5b82a5f10f5b6f875fb1a68492021","target":"record","created_at":"2026-07-05T11:29:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"32bb823f2b0095d0bc8c8212e0e01c513030fc06eb97cf69971201831de5d849","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-06-30T10:29:42Z","title_canon_sha256":"54902905ff71809b1c7408b2cbb92f16ec522fcb845693eeaa67553e6451018b"},"schema_version":"1.0","source":{"id":"2506.23706","kind":"arxiv","version":1}},"canonical_sha256":"5eda1b8e8a18b51ced9cef7f23203dfd81fb2ccaa16e0df09608d41490967b74","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5eda1b8e8a18b51ced9cef7f23203dfd81fb2ccaa16e0df09608d41490967b74","first_computed_at":"2026-07-05T11:29:26.844773Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:29:26.844773Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kL/nyXXwuTePYbub9lbckBfMSIZo/tM66Pxe8gon5hPa+Zco3sRtUpMacf9UMLO7Zq5pNEPJ+uVraT8kJjRqDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:29:26.845279Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.23706","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:759cb47332de60d8d900583466d8ccefdae5b82a5f10f5b6f875fb1a68492021","sha256:be4ef0ad075aa0cf05c30afbd0205028b1e76368a73d015bdd826d67e112c9ce"],"state_sha256":"4297c185c12bad97410f9128dcf088903286fd0699d580c9526aa85e68e903a2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7XcF15WUQ8TYLbwL8R0nVfx9eytEvmCo7BImGDyw1+czAviiXN4nxvtim3W6glvoAKEWYOO8eerMpXEHt9IPDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T00:11:30.069909Z","bundle_sha256":"da3dc0e7cd92f512cf53fc2083029c5dcdd9c09ecd662fa327fbf8b97982ffe8"}}